arcane-os 0.40.0 → 0.40.1

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.40.1
+
+- Include complete selected local resource URL variants in generated static
+  PWA inventories. Reuse the source resource graph, resolve shared component
+  styles and modules against their runtime root, and retain speech worker mode
+  queries. Application selection, source content and output locations remain
+  unchanged; regenerate through the public import-map workflow to receive the
+  corrected offline inventory.
+- Space DigitalOcean FAL inference request starts by one second while retaining
+  four concurrent jobs and ordered playback. Retry a readable rate-limit
+  rejection once, honoring longer readable Retry-After values, and retry a
+  same-job status network failure once. An ambiguous submission network failure
+  is surfaced without submitting another potentially paid job.
+- Preserve the user's enabled speech intent after a synthesis, playback or
+  provider lifecycle failure. A failed job leaves unrelated queued jobs intact;
+  explicit Retry, Load, Mute and Cancel remain user-controlled.
+
 ## 0.40.0
 
 - Add optional `arcane-package.json` `outputDirectory` to select the final

package/README.md

@@ -19,7 +19,7 @@ version-locked SDK runtime, while an integrated Arcane checkout uses its live
 `arcane/` runtime. Both profiles share the theme, packaging, event, cancellation,
 and browser run contracts while retaining their selected application layout.
 
-This checkout defines the `0.40.0` SDK contract. Applications pin one exact npm
+This checkout defines the `0.40.1` SDK contract. Applications pin one exact npm
 version and lockfile; registry state is deliberately not baked into application
 artifacts.
 

package/browser-runtime/ai/digitalocean-speech.mjs

@@ -113,6 +113,7 @@ export function createDigitalOceanFalTTSProvider({
     let generation = 0;
     let unloadOperation = null;
     let disposeOperation = null;
+    let nextInferenceStart = 0;
 
     function authority() {
         return {
@@ -214,12 +215,62 @@ export function createDigitalOceanFalTTSProvider({
         };
     }
 
+    async function fetchInference(url, options, operation) {
+        const signal = options.signal;
+        let retryError = null;
+        while (true) {
+            // Space request starts across jobs, not their completion. Remote jobs
+            // still run concurrently and the runtime retains ordered playback.
+            while (true) {
+                assertNotAborted(signal);
+                const delay = nextInferenceStart - Date.now();
+                if (delay <= 0) break;
+                await waitForStatus(delay, signal);
+            }
+            nextInferenceStart = Date.now() + POLL_INTERVAL_MS;
+            let response;
+            try {
+                response = await fetchImpl(url, options);
+            } catch (error) {
+                assertNotAborted(signal);
+                // A lost POST response may represent an accepted paid job. Only
+                // an identified job's status read can retry a network failure.
+                if (!retryError && options.method === 'GET' && error instanceof TypeError) {
+                    nextInferenceStart = Math.max(nextInferenceStart, Date.now() + POLL_INTERVAL_MS);
+                    retryError = error;
+                    console.warn('Retrying the cloud speech status read once.', error);
+                    continue;
+                }
+                throw error;
+            }
+            assertNotAborted(signal);
+            if (response.status === 429) {
+                // A readable rejection is safe to retry. Its cooldown also
+                // applies to waiting siblings, including when this retry ends.
+                const delay = Math.max(POLL_INTERVAL_MS, retryAfterDelay(response) ?? POLL_INTERVAL_MS);
+                nextInferenceStart = Math.max(nextInferenceStart, Date.now() + delay);
+            }
+            try {
+                await requireSuccessfulResponse(response, signal, operation);
+            } catch (error) {
+                assertNotAborted(signal);
+                if (!retryError && response.status === 429) {
+                    retryError = error;
+                    console.warn(`Retrying the cloud speech ${operation} once.`, error);
+                    continue;
+                }
+                throw error;
+            }
+            return response;
+        }
+    }
+
     async function synthesize(payload, controller, requestGeneration) {
         const signal = controller.signal;
         const apiKey = await readApiKey(signal);
         assertNotAborted(signal);
         const headers = {Authorization: `Bearer ${apiKey}`};
-        const response = await fetchImpl(
+        const response = await fetchInference(
             INVOKE_URL,
             {
                 method: 'POST',
@@ -235,9 +286,9 @@ export function createDigitalOceanFalTTSProvider({
                     }
                 ),
                 signal
-            }
+            },
+            'submission'
         );
-        await requireSuccessfulResponse(response, signal, 'submission');
         let result = await response.json();
         assertNotAborted(signal);
         const requestId = result?.request_id;
@@ -249,22 +300,11 @@ export function createDigitalOceanFalTTSProvider({
                 );
             }
             await waitForStatus(POLL_INTERVAL_MS, signal);
-            let statusResponse;
-            do {
-                statusResponse = await fetchImpl(
-                    `${INVOKE_URL}/${encodeURIComponent(requestId)}`,
-                    {method: 'GET', headers, signal}
-                );
-                assertNotAborted(signal);
-                const retryDelay = statusResponse.status === 429
-                    ? retryAfterDelay(statusResponse)
-                    : null;
-                if (retryDelay === null) break;
-                // Only status reads may be retried; submitting twice can create two paid jobs.
-                await statusResponse.text();
-                await waitForStatus(retryDelay, signal);
-            } while (true);
-            await requireSuccessfulResponse(statusResponse, signal, 'status read');
+            const statusResponse = await fetchInference(
+                `${INVOKE_URL}/${encodeURIComponent(requestId)}`,
+                {method: 'GET', headers, signal},
+                'status read'
+            );
             result = await statusResponse.json();
             assertNotAborted(signal);
         }

package/browser-runtime/ai/speech-worker-runtime.mjs

@@ -844,11 +844,10 @@ function validateConfiguration(configuration, role) {
 function nestedWorkerUrl(role) {
   const url = new URL(
     role === "stt"
-      ? "./browser-whisper-worker.mjs"
-      : "./browser-kokoro-worker.mjs",
+      ? "./browser-whisper-worker.mjs?arcaneSpeechWorkerMode=artifact-module-worker"
+      : "./browser-kokoro-worker.mjs?arcaneSpeechWorkerMode=artifact-module-worker",
     import.meta.url,
   );
-  url.searchParams.set("arcaneSpeechWorkerMode", "artifact-module-worker");
   return url;
 }
 

package/docs/reference/ai/browser-speech.md

@@ -56,8 +56,21 @@ punctuation boundary should submit promptly. This is incremental playback of
 completed synthesis jobs, not a live audio stream from DigitalOcean.
 
 The transport submits `POST https://inference.do-ai.run/v1/async-invoke`, then
-reads that job until its completed `output.audio.url` is available. Each
-segment is submitted once; only status reads retry a `429` with `Retry-After`.
+reads that job until its completed `output.audio.url` is available. One provider
+spaces inference request starts at least one second apart across its concurrent
+jobs; it does not wait for one remote job to finish before starting another.
+A readable `429` rejection permits one retry of the same submission or status
+request after at least one second. A longer readable `Retry-After` postpones
+all pending inference starts for that provider. A failed status Fetch may also
+retry once for the same accepted job. Repeated failures surface their complete
+diagnostics without an endless retry loop; a failed job does not cancel siblings.
+Retry diagnostics remain in the developer console, outside conversation history.
+
+An ambiguous submission network failure is not automatically resubmitted: a
+browser cannot distinguish a rejected preflight from an accepted paid job whose
+response was lost. This contract has no submission idempotency mechanism, and
+unreadable response headers cannot supply a server cooldown. Pacing reduces local
+request bursts; it does not claim to free upstream concurrency slots or fix CORS.
 The audio download never receives the inference Authorization header.
 The selected multilingual-v2 service supports speed `0.7` through `1.2`;
 unsupported speeds reject rather than being silently clamped. Complete

package/docs/reference/pwa.md

@@ -93,6 +93,16 @@ The application entry and generated PWA shell records are retained. Select the
 resources needed by every offline page, including its shared modules and styles.
 The worker script itself is never an application cache entry.
 
+For direct installed-package root applications, public `arcane import-map`
+generation follows the same source resource graph as `arcane dev` before writing
+the static offline inventory. Imports from unvisited pages, shared runtime
+modules, component styles, and statically declared Worker URLs retain their
+authored query values. SDK component `./arcane/` resource attributes resolve from
+that component's actual runtime root, including installed package aliases and
+nested component directories; ordinary application document bases keep their
+normal meaning. The graph selects resources already present in the configured
+routes. It does not invent resource paths or enumerate user-specific page URLs.
+
 These settings describe published application resources. They do not select
 user uploads, provider responses, live API requests, saved conversations,
 preferences, IndexedDB, OPFS, or a model owner's download/cache lifecycle.
@@ -180,7 +190,7 @@ without loading certificates; see [explicit HTTP development](cli.md#explicit-ht
 `--public` selects the IPv4 wildcard bind address; it does not enable PWA
 configuration, change manifest metadata, or determine browser installability.
 
-Source inventory work begins when the browser requests the worker or current
+Live source inventory work begins when the browser requests the worker or current
 offline manifest, after the page can start. It traverses the selected route
 inventory once for that request, follows page and runtime resource references
 to retain selected query variants, and shares an in-flight traversal with
@@ -189,6 +199,11 @@ document corpus bodies remain under their existing owner. It does not rebuild
 the application. Installation metadata and bootstrap requests reuse the current
 generated bundle.
 
+An explicit root import-map refresh also performs that traversal to produce the
+committed static PWA files. It opens no server or listener. Its generated
+inventory is available to ordinary static hosting without first visiting each
+page through the development server.
+
 The SDK owns version information in `arcane-offline.json`:
 
 | Field | Owner and update rule |

package/docs/reference/runtime-components.md

@@ -1566,8 +1566,10 @@ boundary applies to STT activation, transcription, TTS lifecycle, synthesis,
 and playback failures.
 
 `reportTTSError()` recognizes `synthesis`, `decode`, `playback-start`, and
-`playback-resume`. It mutes and stops the failed operation, preserves sticky
-provider readiness, and emits `speech-synthesis-error` with the exact boundary,
+`playback-resume`. It preserves the user's mute choice, sticky provider
+readiness, and accepted sibling speech jobs. The AI runtime owns settlement of
+the failed job; reporting an error neither stops the queue nor retries it. The
+component emits `speech-synthesis-error` with the exact boundary,
 stable reason/code, generic user-safe status, and complete Error in the local
 event detail.
 
@@ -1600,8 +1602,16 @@ same capture operation id rather than inventing a second correlation boundary.
 User Unmute calls the shared `AI.setSpeechMuted(false)` lifecycle owner before
 or with publishing the TTS load intent, so the runtime can legally load TTS.
 Configured `initialMuted:false` records that same unmute intent even when the
-TTS route is still unselected or loading; the component remains publicly muted
-until the selected role reaches `ready`, then applies the preserved intent.
+TTS route is still unselected or loading. Public `muted` expresses the user's
+choice; role availability and the AI runtime still prevent playback until the
+selected role reaches `ready`, when the waiting intent is applied. A failed
+load ends its activation attempt without changing that choice or starting
+another attempt. Retry voice explicitly starts a new attempt, including when
+the preserved choice is unmuted; an unloaded selected voice offers Load voice.
+When a role returns to ready, permitted queued playback resumes through the
+existing AI owner without repeating activation or replaying failed jobs.
+Synthesis, decode, and playback failures also
+preserve that choice and do not automatically replay failed speech.
 Mute calls `AI.setSpeechMuted(true)`, stops playback, cancels active TTS work,
 and unloads the selected TTS role. Lifecycle failures remain visible through
 `speech-tts-lifecycle-error` and sticky role state.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arcane-os",
-  "version": "0.40.0",
+  "version": "0.40.1",
   "description": "Arcane OS JavaScript SDK, project-local CLI, browser runtime, and repository-portable application packager.",
   "type": "module",
   "main": "./src/index.mjs",

package/runtime/arcane/components/speech.html

@@ -518,7 +518,7 @@
             requestUserMute();
         } else {
             pendingUnmute = true;
-            host.muted = true;
+            host.muted = false;
             if (!settleSuccessfulUnmute()) {
                 synchronizeAIMutedState();
                 continuePendingUnmute();
@@ -567,21 +567,24 @@
         if (sttBecameUnready) {
             cancelSTTOperation('runtime-unready');
         }
-        if (ttsBecameUnready) {
+        if (ttsBecameUnready && ttsRole.state !== 'error') {
             pendingUnmute = false;
-            host.muted = true;
             stopTTSPlayback();
         }
-        if (ttsRole.state === 'error' && (pendingUnmute || !host.muted)) {
+        if (ttsRole.state === 'error') {
             pendingUnmute = false;
-            host.muted = true;
-            stopTTSPlayback();
         }
 
-        settleSuccessfulUnmute();
+        const unmuteSettled = settleSuccessfulUnmute();
         continuePendingUnmute();
 
         synchronizeAIMutedState();
+        if (!unmuteSettled
+            && previousTTSRole.state !== 'ready'
+            && ttsRole.state === 'ready'
+            && !host.muted) {
+            resumeTTSPlayback();
+        }
         renderControls();
         renderStatus();
     }
@@ -720,6 +723,9 @@
             if (pendingTTSIntent === 'load') {
                 label = 'Cancel voice load';
                 description = 'Cancel loading the selected voice.';
+            } else if (!host.muted) {
+                label = 'Load voice';
+                description = 'Load the selected voice.';
             }
         } else if (ttsRole.state === 'error') {
             disabled = !providerSelected;
@@ -960,7 +966,7 @@
             return;
         }
 
-        if (host.muted) {
+        if (host.muted || ['unloaded', 'error'].includes(ttsRole.state)) {
             void requestUserUnmute();
         } else {
             requestUserMute();
@@ -976,7 +982,7 @@
         }
         const wasMuted = host.muted;
         pendingUnmute = false;
-        const shouldUnload = !wasMuted
+        const shouldUnload = (!wasMuted && is.function(globalThis.ai?.setSpeechMuted))
             || pendingTTSIntent === 'load'
             || ['loading', 'ready', 'error'].includes(ttsRole.state);
         host.muted = true;
@@ -1004,9 +1010,9 @@
         ) {
             return false;
         }
+        host.muted = false;
         if (!is.function(globalThis.ai?.setSpeechMuted)) {
             pendingUnmute = true;
-            host.muted = true;
             renderControls();
             renderStatus();
             return false;
@@ -1021,8 +1027,7 @@
                 && ['unloaded', 'loading', 'error'].includes(ttsRole.state)
             );
         if (!canRequestLoad) {
-            host.muted = true;
-            stopTTSPlayback();
+            pendingUnmute = false;
             reportTTSLifecycleError(
                 new Error('No selected speech provider is available to load.'),
                 'load'
@@ -1038,8 +1043,6 @@
         }
         if (!requested) {
             pendingUnmute = false;
-            host.muted = true;
-            stopTTSPlayback();
             renderControls();
             renderStatus();
             return false;
@@ -1117,8 +1120,6 @@
             pendingTTSIntent = null;
             if (action === 'load') {
                 pendingUnmute = false;
-                host.muted = true;
-                stopTTSPlayback();
             }
             reportTTSLifecycleError(error, action, operationId);
             return false;
@@ -1211,8 +1212,6 @@
             : 'synthesis';
         const failure = failures[normalizedBoundary];
         const message = visibleErrorMessage(error, failure.message);
-        host.muted = true;
-        stopTTSPlayback();
         localStatus = {
             message,
             tone: 'error'

package/src/dev-server.mjs

@@ -13,7 +13,7 @@ import {APP_CONFIG_NAME, validateAppConfig} from './packager/core.mjs';
 import {createEventQueue} from './event-queue.mjs';
 import {
     applyPwaEntryReferences,inspectImportMapHtml,MANAGED_IMPORT_MAP_ATTRIBUTE,
-    readWorkspaceAssetVersion,rewriteAssetReferences,versionAssetUrl
+    readWorkspaceAssetVersion,resolveAssetReference,rewriteAssetReferences,versionAssetUrl
 } from './import-map.mjs';
 import {createPwaArtifacts,selectPwaFiles} from './pwa.mjs';
 
@@ -658,14 +658,15 @@ async function sourcePwaAssets(routeSet, mappings, signal, resourceUrls, resourc
                 }
             }
         }
-        for (const {url, kind, baseHref, baseKind} of references) {
+        for (const reference of references) {
+            const {url, kind} = reference;
             if (kind === 'import' && !/^(?:\.{1,2}\/|\/)/u.test(url)) continue;
             let target;
-            let base;
             try {
-                base = baseHref ? new URL(baseHref, current.url)
-                    : managedMap || baseKind === 'document' ? documentUrl : current.url;
-                target = new URL(versionAssetUrl(url, null), base);
+                target = resolveAssetReference(
+                    {...reference, url: versionAssetUrl(url, null)},
+                    {ownerUrl: current.url, documentUrl, managedMap}
+                );
             } catch {
                 // Non-URL source values retain their authored behavior.
                 continue;
@@ -695,6 +696,11 @@ async function sourcePwaAssets(routeSet, mappings, signal, resourceUrls, resourc
     return [...selectedUrls].sort();
 }
 
+export async function collectSourcePwaAssets({workspaceRoot,appId,signal,onEvent}={}){
+    const routes=await sourceRoutes(workspaceRoot,appId,{signal,onEvent});
+    return sourcePwaAssets(routes,routes.mappings,signal,new Set(),new Set());
+}
+
 function closeDevelopmentListeners(fileServer, tlsServer) {
     const closeTls = tlsServer ? new Promise(
         function closeRawTlsListener(resolve, reject) {
@@ -1236,13 +1242,16 @@ async function startOwnedDevServer({
                     .includes(request.headers['sec-fetch-dest']);
                 const rewrite=runtimeResource||entryDocument||browserResource||managedMap
                     ||resourcePaths.has(target.path);
-                const onReference = function observeServedResource({url,kind,baseHref,baseKind}) {
+                const onReference = function observeServedResource(reference) {
+                    const {url,kind,baseKind}=reference;
                     if (pwaEnabled && kind !== 'fetch'
                         && !(kind === 'import' && !/^(?:\.{1,2}\/|\/)/u.test(url))) {
                         try {
                             const documentUrl = new URL(target.path, 'http://arcane.invalid');
-                            const base = baseHref ? new URL(baseHref, documentUrl) : documentUrl;
-                            const resource = new URL(versionAssetUrl(url, null), base);
+                            const resource = resolveAssetReference(
+                                {...reference,url:versionAssetUrl(url,null)},
+                                {ownerUrl:documentUrl}
+                            );
                             if (resource.origin === documentUrl.origin) {
                                 pwaResourceUrls.add(`${resource.pathname}${resource.search}`);
                             }
@@ -1254,8 +1263,7 @@ async function startOwnedDevServer({
                         ||(kind==='import'&&!/^(?:\.{1,2}\/|\/)/u.test(url)))return;
                     try{
                         const documentUrl=new URL(target.path,'http://arcane.invalid');
-                        const base=baseHref?new URL(baseHref,documentUrl):documentUrl;
-                        const resource=new URL(url,base);
+                        const resource=resolveAssetReference(reference,{ownerUrl:documentUrl});
                         if(resource.origin===documentUrl.origin
                             &&/\.(?:m?js|html?|css)$/iu.test(resource.pathname)){
                             resourcePaths.add(decodeURIComponent(resource.pathname));

package/src/import-map.mjs

@@ -1281,6 +1281,23 @@ export function rewriteAssetReferences(source,{filePath,version=SDK_VERSION,onRe
     return source;
 }
 
+export function resolveAssetReference({url,baseHref,baseKind},{ownerUrl,documentUrl=ownerUrl,managedMap=false}){
+    if(baseKind==='component-runtime'&&url.startsWith('./arcane/')){
+        const owner=new URL(ownerUrl);
+        const marker='/arcane/components/';
+        const componentIndex=owner.pathname.lastIndexOf(marker);
+        if(componentIndex>=0){
+            // HTMLImport resolves these component attributes against their
+            // installed runtime, independently of the host document's base.
+            const runtimeRoot=new URL(owner.pathname.slice(0,componentIndex+'/arcane/'.length),owner.origin);
+            return new URL(url.slice('./arcane/'.length),runtimeRoot);
+        }
+    }
+    const base=baseHref?new URL(baseHref,ownerUrl)
+        :managedMap||baseKind==='document'?documentUrl:ownerUrl;
+    return new URL(url,base);
+}
+
 function registerSpecifier(registry,specifier,target){
     registry.set(specifier,{specifier,target});
 }
@@ -2071,7 +2088,9 @@ function htmlReferenceEdits(source,version,onReference){
                 :element.tag==='link'&&relationships.includes('preload')
                     &&['script','worker','style'].includes(destination)?destination==='style'?'style':'script':'asset';
             const view=htmlAttributeView(original);
-            if(view)reportAssetReference(reportHtmlReference,view.decoded,kind);
+            if(view)reportAssetReference(reportHtmlReference,view.decoded,kind,
+                (name==='href'||name==='src')&&view.decoded.startsWith('./arcane/')
+                    ?'component-runtime':undefined);
             const value=versionHtmlAttribute(original,version);
             if(value===original)continue;
             const position=attributes.positions.get(name);

package/src/packager/core.mjs

@@ -19,6 +19,7 @@ import {
     applyPwaEntryReferences,
     inspectImportMapHtml,
     readWorkspaceAssetVersion,
+    resolveAssetReference,
     rewriteAssetReferences,
     versionAssetUrl
 } from '../import-map.mjs';
@@ -967,17 +968,19 @@ async function packageWithContext(context,options={}){
                 resource={references,...(pwaDocumentSources.has(relative)?{content}:{})};
                 resources.set(relative,resource);
             }
-            for(const {url,kind,baseHref,baseKind} of resource.references){
+            for(const reference of resource.references){
+                const {url,kind,baseHref}=reference;
                 const traversable=kind!=='fetch'&&(kind!=='asset'||/\.css(?:[?#]|$)/iu.test(url))
                     &&(kind!=='import'||/^(?:\.{1,2}\/|\/)/u.test(url));
                 if(!pwaEnabled&&!traversable)continue;
                 if(kind==='import'&&!/^(?:\.{1,2}\/|\/)/u.test(url))continue;
                 try{
                     const ownerUrl=new URL(packageResourceUrl(relative),entryUrl.origin);
-                    const base=baseHref?new URL(baseHref,ownerUrl)
-                        :baseKind==='document'||path.posix.basename(relative)==='arcane.importmap.json'
-                            ?current.documentUrl:ownerUrl;
-                    const target=new URL(url,base);
+                    const target=resolveAssetReference(reference,{
+                        ownerUrl,
+                        documentUrl:current.documentUrl,
+                        managedMap:path.posix.basename(relative)==='arcane.importmap.json'
+                    });
                     if(target.origin===entryUrl.origin){
                         const file=decodeURIComponent(target.pathname).replace(/^\//u,'');
                         if(pwaEnabled&&offlineInventory.has(file)){

package/src/toolchain.mjs

@@ -11,7 +11,7 @@ import {
     validateWorkspace
 } from './workspace.mjs';
 import {loadArcaneIntegratedProvider} from './integrated-provider-loader.mjs';
-import {startDevServer} from './dev-server.mjs';
+import {collectSourcePwaAssets,startDevServer} from './dev-server.mjs';
 import {applyPwaEntryReferences,generateImportMap,readApplicationTestImportMapContext} from './import-map.mjs';
 import {createPwaArtifacts} from './pwa.mjs';
 import {readInstalledSdkLayout} from './sdk-runtime-layout.mjs';
@@ -337,11 +337,21 @@ async function refreshRootApplicationFiles(prepared,inspected,importMap,{signal,
         ...inspected.files.filter(file=>file!=='index.html'||manifest.include.includes('index.html')),
         importMap.artifactRelativePath
     ])];
+    const sourceOrigin='http://arcane.invalid';
+    const selectedPaths=new Set(files.map(function selectedStaticPath(file){
+        return new URL(`/${file.split('/').map(encodeURIComponent).join('/')}`,sourceOrigin).pathname;
+    }));
+    const assets=installed?.direct&&manifest.pwa?.enabled
+        ?(await collectSourcePwaAssets({workspaceRoot,appId,signal,onEvent})).filter(function selectedStaticVariant(value){
+            const url=new URL(value,sourceOrigin);
+            return url.origin===sourceOrigin&&selectedPaths.has(url.pathname);
+        }):[];
     const pwa=installed?.direct&&manifest.pwa?.enabled?createPwaArtifacts({
         app:{id:appId,displayName:manifest.displayName,version:manifest.version,entry},
         sdkVersion:installed.version,
         pwa:manifest.pwa,
         files,
+        assets,
         basePath:'/',
         appBase:'/',
         installationId:`/apps/${appId}/`,